Privacy Policy Waymark

This is a courtesy translation. The German version at German version is legally binding.

Version 2.2 · Last updated: November 2026

In short: No account, no ads, no analytics, no tracking, no developer server. Your recordings live on your devices and, only if you turn it on, in your own iCloud account. Heart rate, heart rate zones and body data never go into the iCloud sync and never to the developer.

This privacy policy applies specifically to the Waymark app (iPhone and Apple Watch, with widgets, Control Center button and Live Activity) and supplements the general privacy policy of this website, which covers visiting the website itself.

Visiting this website: audience measurement and hosting

Notice about tracking: When you open this page, your visit is counted anonymously with GoatCounter (audience measurement). GoatCounter sets no cookies and stores nothing on your device. Your IP address is not stored. Only the page visited, the referring page (referrer), browser, operating system, approximate country, language and screen size are recorded. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an overview of page views).

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Server log files are created for technical reasons. Details on GoatCounter, hosting and your right to object are in the general privacy policy of this website. This measurement concerns only the visit to the website, not the use of the app.

1. Controller

Christian Drapatz
Kämpenstrasse 42
45147 Essen
Germany
Email: support@onetwoapps.com

2. Basic principle

Waymark processes your data on your device. The developer runs no server of their own; there is no user account, no sign-in, no advertising, no analytics or crash SDKs from other vendors and no tracking across apps or websites. The app sends no data to the developer.

Data leaves your device only in the cases described below: through Apple services (maps, routes, addresses, weather, Apple Health, Siri, optional iCloud sync, device backup), when you export something, when you send a prepared message yourself, and when you write to support.

3. What the app stores on your device

• Recordings: sport, start and end, duration and breaks, the track as a sequence of location points with time, speed, accuracy and elevation, distance, speed, vertical, steps, floors and stops, start and destination address, title, note, tags, color tags, markers, the battery level at start and end and a small track image for the list.
• Saved places and tours: coordinates, address, title, note, category and, if you like, a reminder.
• Route photos: the image file in the app is re-encoded when saved and contains no location data in the file. The app stores location, elevation, viewing direction and accuracy separately in its database.
• Heart rate (only with Apple Health turned on, section 6): heart rate history, average, maximum and time per heart rate zone of a recording.
• Body data (voluntary, entered by you): weight, year of birth, sex, resting and maximum heart rate.
• Calculated values: active energy (calories) with the method used, heart rate zones, training load, DIN 33466 walking time, statistics, goals and personal bests.
• Safety: emergency contacts with name, phone number, type and note, the return reminder (time and place), the times of the safety timer and the country you chose for the emergency numbers. The emergency numbers themselves for 119 countries are part of the app and are stored offline on the device.
• Settings, including units, color scheme, language, tiles per sport and the switches for Health, announcements and notifications.

If a measurement is missing, the app stores no substitute. Heart rate is never estimated from other values. The app's logs contain no locations.

4. Location, map and addresses

The app only asks for “While Using the App”, never “Always”. It uses your location to record the track of a recording you started, also with the screen locked or when you switch apps. iOS then shows the location indicator. When the recording ends, background location ends too. Outside a recording the app uses your location only while a matching view is open: map, compass, help view, weather, saving a place or picking one on the map. For the emergency bar the app derives only the country from your location; you can also choose it by hand.

Apple Maps: for the map and map images iOS loads the visible area from Apple. The app loads the small track images in the list on its own in the background, also for older recordings and without you opening the map; for this Apple receives the map area of each track and your IP address. For target navigation the app sends start and destination to Apple to calculate a route. The app does not download offline maps of its own.

Weather (Apple Weather): for weather, forecast and the rating per sport the app sends a location rounded to about one kilometre to Apple's WeatherKit service and receives weather data in return. Apple receives your IP address in the process. No movement profile is transferred. Without internet there is no weather; all other features keep working.

Addresses: for the start and destination address of a recording, when saving a place, for the current address in the help view, in the map picker and when importing coordinates, iOS sends the coordinates to Apple's address service and receives an address (or the other way round).

5. Motion and sensors

With the “Motion & Fitness” permission the app counts steps, cadence and floors and measures elevation with the barometer. For the compass it uses the device's motion sensors. The app processes these values on the device and stores them with the recording.

6. Apple Health and health data

Heart rate, body data and the values calculated from them are health data within the meaning of Art. 9 GDPR. The app only uses Apple Health if you explicitly allow it: with the “Apple Health” switch under Settings › Recording, off by default, and with the iOS permission dialog in which you allow or deny each data type individually. As long as the switch is off, the app reads nothing from and writes nothing to Health.

Read: heart rate (for the live display, heart rate history, calories and zones), active energy, body weight and workouts. A weight from Health is used for calculation only and not stored. The app does not read year of birth, sex, resting or maximum heart rate from Health; you enter these yourself.

Write: after every saved recording of a sport with heart rate values the app creates a workout in Health: sport, start, end, breaks, distance (if Health has a matching type) and the route. The app does not write energy or heart rate.

Calorie calculation: the app estimates active energy. If Apple Health has a measured value, it uses that. Otherwise it calculates with heart rate using the Keytel formula (heart rate, weight, age, sex), without heart rate using MET values (sport, speed, gradient, weight). Without a weight, and for motorized sports, it calculates no calories. Heart rate zones use resting and maximum heart rate, training load uses the time in the zones. The method is shown in the recording's details. All values are estimates for guidance; the app is not a medical device and makes no diagnosis.

Where health data stays: heart rate history, average and maximum heart rate, time in zones, body data and calories including MET estimates are stored on the device only. They never go into the app's iCloud sync (section 10), never into logs, never to the developer and are never used for advertising. MET estimates also stay local because the body weight used may come from Health. Heart rate only goes into an export file if you choose so (section 11). What is stored in Apple Health is managed by Apple Health.

Withdrawal: you can turn the switch off at any time or change the permissions in the Health app or in iOS Settings under Health › Data Access & Devices. Withdrawal applies to the future. Workouts already stored in Health are deleted in the Health app.

7. Apple Watch

With the watch app you start, pause and stop a recording and read your values. Transfer runs through Apple's system functions between iPhone and watch (WatchConnectivity), without a developer server.

Live heart rate: if this switch is on (off by default, only available with Apple Health turned on), the watch starts a workout session during a recording, measures your heart rate and sends it to your iPhone. For this the watch asks once for its own Health permission (workouts, heart rate). The session on the watch is discarded at the end and not saved to Health; only the iPhone creates the workout (section 6). With the “Heart rate in Live Activity” switch (off by default) your heart rate also appears on the Lock Screen.

8. Camera and photos

The app uses the camera for photos along the route. For the Photos app it only asks for “Add Photos Only”; it does not read your library. Only if you turn on the “Save original to Photos” switch (off by default) does the app also store the unchanged original in the Photos app, including the camera's location data. The app only offers Live Photos with this switch on; they go to the Photos app only. You can also copy a photo to the Photos app by hand. What is in the Photos app is managed there.

9. Notifications and voice announcements

The app only sends local notifications that your device schedules itself, without a server:

• Sunset: for running, trail running, hiking, nordic walking and walking, 60 minutes before sunset. The app calculates sunset on the device, without internet. The text names the time, not a place. Turn off: Settings › Recording › Announcement options › “Sunset”.
• Place reminder: only if you set one for a place. The text contains the place's title or note.
• Safety timer: only if you start it. Two notifications: when the return time is reached and 15 minutes later with the advice to notify your contacts. The text contains no location.
• Navigation from the watch: if you start navigation on the watch, the iPhone may show a notice with the destination's title.

The app asks for notification permission only when you use one of these features. The return reminder in the “Safety” area appears in the app, not as a notification. Voice announcements (distance, status, turn hints) are generated by your device; the app does not use the microphone.

10. iCloud sync (optional)

Sync is off by default. If you turn it on, the following is synced through the private CloudKit database of your own iCloud account:

• recordings with track (location points with time), breaks, markers, start and destination address, distance, elevation, speed, steps, title, note, tags and color tags,
• the stats of each recording without heart rate or calorie values, including the battery level at start and end,
• the small track image for the list (a map section showing the track),
• route photos with location, elevation and viewing direction,
• saved places and tours,
• emergency contacts and the return reminder from the “Safety” area.

Not synced are heart rate history, average and maximum heart rate, zones, calories including MET estimates, body data and settings. To let your devices know about changes, iCloud uses Apple's push service. The developer has no access to your iCloud data. Storage and transfer are handled by Apple; Apple's privacy policy applies: apple.com/legal/privacy. If the same entry was changed differently on two devices, you decide which version applies. When you turn sync off, the app offers to delete the data from iCloud as well.

11. Export, import and sharing

• Message to contacts (safety timer): if the return time has passed, the app prepares a message with your last known location as an Apple Maps link to your emergency contacts and opens the iOS Messages window. The app never sends on its own; whether and to whom you send is your decision. Your carrier's or iMessage's terms apply to sending.
• GPX file: contains the track with locations, times and elevation. If there are heart rate values, the app asks with every export whether to include them; without your choice no heart rate goes into the file.
• PDF report: tour report with map, elevation profile, stats and route photos, plus a day report.
• Backup file (.spt): tours, places, emergency contacts and settings for restoring or transferring.
• QR code of a place with its coordinates.
• Import: the app reads GPX tracks, coordinates and backup files on the device.

You decide where to send files; the recipients' privacy policies apply.

12. Device backup

Like all app data, your recordings, photos, heart rate and body data are included in a backup of your device if you turned it on in iOS: in iCloud Backup at Apple or in a backup on your computer. You control this backup in iOS. It is independent of the app's iCloud sync; the developer has no access to it.

13. Widget, Live Activity and Siri

The widgets show the last recording (title, sport, distance, duration, top speed, ascent, time, map image), the state of your weekly goal, sunset and return trip, and the running recording; the Control Center button starts a recording. The Live Activity shows speed, distance, elevation and time, heart rate only with its switch turned on. Both read these values on the device and contain no coordinates. On the Lock Screen they are visible without unlocking.

With Siri and Shortcuts you can start, pause and resume a recording, save a place, show the last place and open the help view. Speech recognition is handled by Apple's Siri; nothing goes to the developer.

14. Contact by email

If you write to support, I process your email address and the content of your message to answer your request. I delete messages once they are no longer needed, unless there is a legal retention obligation. Please do not send health or location data you do not want to share.

15. Legal bases

• Recording, location, motion data, map, routes, addresses, weather, photos, safety, export: providing the features you use (Art. 6(1)(b) GDPR); access to the device where strictly necessary (§ 25(2) no. 2 TDDDG).
• Heart rate, body data and values calculated from them, reading from and writing to Apple Health, live heart rate from the watch: your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR), given by entering the data, turning on the respective switch and the iOS permission.
• Optional iCloud sync and notifications: consent or turning on the feature (Art. 6(1)(a) GDPR).
• Support requests: Art. 6(1)(b) or (f) GDPR.

You can withdraw consent at any time with effect for the future (sections 6, 7, 9, 10).

16. Recipients and transfers to third countries

The developer receives no data from the app. The only recipient is Apple, and only in these cases: map tiles, route calculation, addresses, weather (rounded location), Siri, Apple Health on your device, the optional iCloud sync and a device backup you turned on. Apple may also process data in the USA. Apple Inc. is certified under the EU-US Data Privacy Framework. There is no disclosure to other third parties, no sale and no use for advertising.

17. Retention and deletion

• Data on the device: until you delete it. You delete single entries in the app; “Delete all data” in Settings removes all of the app's data from this device and, if you choose, from your iCloud account as well. When you delete the app, iOS removes all app data from the device.
• Data in the iCloud sync: until you delete it, through “Delete all data” or when turning sync off.
• Workouts in Apple Health and photos in the Photos app: stay there until you delete them there, even after deleting the app.
• Device backups: according to iOS rules, until the backup is replaced or deleted.
• Support emails: see section 14.

18. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to withdraw consent at any time (Art. 7(3)). As the data lives on your devices and in your own iCloud account, you can exercise most rights directly in the app: view, edit, export and delete. The developer holds no data from the app and therefore cannot provide information about app content; for support emails, contact support@onetwoapps.com.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for the controller (based in Essen, North Rhine-Westphalia) is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
Email: poststelle@ldi.nrw.de
Web: ldi.nrw.de

19. Obligation to provide data

Using the app and every permission is voluntary. Without location permission the app cannot record a track; without the other permissions only the respective feature is missing. Without Health permission it shows no heart rate and calculates calories without heart rate or, without a weight, not at all.

20. Changes

If the app changes in a way that changes the processing, I will update this policy.

• 2.2 (November 2026): renamed to Waymark. Weather via Apple Weather (rounded location), emergency numbers for 119 countries offline in the app, safety timer with local notifications and a prepared message (sent only by you), “Safety” area instead of “I need help”, widgets and Control Center button.
• 2.1 (October 2026): the track image for the list is synced with iCloud so other devices don't have to create it themselves.
• 2.0 (October 2026): workout in Health with route and breaks, heart rate history per recording, calories from heart rate, body data, heart rate zones and training load, live heart rate from Apple Watch, sunset notification, Photos app only on request (off by default), Siri start, GPX export and import, location permission “While Using” only. Since the privacy correction of October 21, 2026, MET calorie estimates are also excluded from iCloud sync.
• 1.0 (September 2026): first version.